Who are we and what do we do with your personal data?

IGD SIIQ S.p.A. (hereinafter IGD), with registered office in Bologna, via Trattati Comunitari Europei 1957-2007 n. 13, Italy, T.C. and VAT no. 00397420399 in the person of its pro tempore legal representative, hereinafter the Data Controller, protects the confidentiality of your personal data and provides it with the necessary protection from any event that may put it at risk of violation.

For this purpose, the Data Controller implements policies and practices regarding the collection and use of personal data and the exercise of your rights under applicable law. The Data Controller is responsible for updating the policies and practices adopted for the protection of personal data whenever necessary and in any case in the event of regulatory and organisational changes that may affect the processing of your personal data.

The Data Controller appointed a Data Protection Officer (DPO) who you can contact if you have questions about adopted policies and practices. You can contact the DPO at the registered office of IGD SIIQ SPA, via Trattati Comunitari Europei 1957-2007 n. 13 in Bologna, Italy, tel. +39 051 509111, fax +39 051 509127, email dpo@gruppoigd.it

How does IGD collect and process your data?

The Data Controller collects and/or receives information about you, such as:

• IP address
• email address
• name
• surname
• company
• nationality

issued during the subscription to the newsletter service on the portal www.gruppoigd.it. Your personal data is processed in accordance with your request in order to send you informative communications concerning the market sector in which IGD operates and, eventually, to the company.

The communication of your personal data is mainly to third parties and/or recipients whose activities are necessary for the carrying-out of the activities related to the above purposes, and also to meet certain legal obligations:

1. IT support company and hosting company;
2. website management and maintenance services companies.

What happens if you do not provide your data?

Your personal data are necessary in order to fulfill the request to subscribe to the service presented by you through the “newsletter” section and, if not provided, the Data Controller cannot fulfil your requests.

How and for how long is your data retained?

Your personal data are processed by both electronic and manual means and tools made available to subjects acting under the authority of the Data Controller authorised and trained for this purpose.

The data is stored in paper, IT and electronic archives even outside the European Economic Area and specific security measures are implemented. Particularly:

UK – Commission Implementing Decision (EU) 2021/1773 of 28 June 2021 pursuant to Directive (EU) 2016/680 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom

Personal data are stored in electronic files protected by effective and adequate security measures to counter the risks of violation considered by the Data Controller for for the duration of the newsletter service and for a period of 1 month from the request to unsubscribe from the service, without prejudice, also, to any dispute if it involves an extension of the aforesaid time limits, for the time needed to pursue the related purpose.

You can unsubscribe at any time by sending an e-mail to investor.relations@gruppoigd.it and privacy@gruppoigd.it or using the “unsubscribe” push button at the bottom of each communication.

What are your rights?

Consistent with the time limits established for the processing of your personal data, the rights you are granted allow you to always have control of your data. Your rights are:

• access;
• rectification;
• erasure;
• restriction of processing;
• objection to processing;

Your rights are guaranteed without any special charges or formalities: the request to exercise them is essentially free of charge. You have the right:

• to obtain a copy, also in electronic format, of the data you have requested access to. If you request additional copies, the Data Controller may charge you a reasonable contribution to costs;
• to obtain the erasure of your personal data or the restriction of the processing or even the updating and rectification of your personal data and to obtain that third parties/recipients also comply with your request in the event that they receive your data, unless legitimate reasons prevail over those that led to your request (e.g. environmental investigations and risk limitation caused by the emergency managed through them by the Data Controller);
• to obtain all useful information regarding the activities carried out as a result of the exercise of your rights without delay and, in any case, within one month of your request, unless there are grounds for extending it to two months, which must be duly communicated to you.
• For any further information and to send your request, please contact the Data Controller at privacy@gruppoigd.it

Who can you complain to?

Without prejudice to any other administrative or judicial action, you may submit a complaint to the competent supervisory authority or to the authority that carries out its tasks and exercises its powers in Italy where you have your habitual residence or work or, if different, in the Member State where the violation of Regulation (EU) 2016/679 occurred.